The Module obliges firms to identify the range of risks that they face and to put in place appropriate systems to address those risks. It also requires the establishment of an appropriate framework for identifying, monitoring and managing risks across an investment firm licensee's operations.